Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7EvTY2EGFnR8vrOQL4e_8_T5r0I.roa
File: 7EvTY2EGFnR8vrOQL4e_8_T5r0I.roa (raw, json)
Hash identifier: 9BJRHeyauqEqkqpGjFvVaTv0CLo1cRCvHPDx5KvsoOs=
Subject key identifier: EC:4B:D3:63:61:06:16:74:7C:BE:B3:90:2F:87:BF:F3:F4:F9:AF:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FE0C593E0A2FEF87D73971E50E21D3F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7EvTY2EGFnR8vrOQL4e_8_T5r0I.roa
Signing time: Mon 20 Mar 2023 08:04:27 +0000
ROA not before: Mon 20 Mar 2023 08:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:fe0c:250d/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:0c:59:3e:0a:2f:ef:87:d7:39:71:e5:0e:21:d3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 08:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec4bd363610616747cbeb3902f87bff3f4f9af42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:6a:7d:91:f3:45:f0:00:10:a0:9f:a3:f9:
61:7a:d6:ac:88:9c:a8:98:da:8a:0c:d9:bd:c2:e2:
11:bf:e9:af:2e:77:ae:a1:4f:15:de:18:86:9b:cf:
0c:60:bf:c1:c4:39:58:61:72:d0:4f:cd:9e:b0:e0:
13:b5:e2:bc:bf:1b:59:df:ea:d0:c9:2b:75:a3:f4:
86:ab:67:62:83:2e:ca:6b:f5:d5:e4:52:f4:63:83:
b3:bc:28:e5:69:cb:21:b9:88:a1:f9:01:93:46:89:
28:2c:9a:87:55:6d:9c:58:bf:d8:3c:4a:de:50:ce:
76:50:c8:ae:03:8d:71:17:c9:6a:93:2d:24:97:28:
cc:84:a4:8f:29:30:96:5f:d3:fa:8f:33:15:11:ed:
b8:97:50:ea:43:60:c1:16:74:c8:02:1b:dc:ef:ab:
8e:06:fa:d1:9c:f8:23:34:dd:e0:8e:29:36:a0:f7:
e4:d2:95:73:e2:37:7b:9a:6f:8d:31:c5:8d:bb:48:
20:e4:37:f5:0a:5a:cf:43:68:9d:db:cd:0d:1c:9a:
47:11:c6:b9:cf:ed:72:4f:70:e8:4e:19:ad:c2:bc:
a0:ad:04:59:45:71:40:f9:a5:5f:bc:b0:76:f5:29:
a3:76:be:a1:ab:67:89:14:43:52:ac:6a:e4:85:1a:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:D3:63:61:06:16:74:7C:BE:B3:90:2F:87:BF:F3:F4:F9:AF:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7EvTY2EGFnR8vrOQL4e_8_T5r0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:16:7d:09:13:51:fa:bf:71:cd:08:51:ea:c9:ef:64:b4:46:
51:f4:66:3b:e8:a0:10:44:c8:ec:7d:74:13:0a:dd:e4:46:07:
99:0b:4a:1b:21:ab:d3:6d:ed:7d:e3:2d:0d:1e:91:b6:f3:e6:
83:c3:f8:8a:35:8d:3e:b7:96:9c:5f:e1:99:f0:28:04:75:1e:
f6:e9:04:1b:9e:45:cd:43:d1:ea:77:f0:5c:7a:c9:09:ba:bd:
be:53:83:7c:13:77:6e:47:00:8a:45:43:34:96:ca:db:12:8d:
87:5b:fb:d2:d1:2c:f5:1c:7b:d8:c7:50:bf:4b:d5:9a:7c:cf:
3c:aa:59:89:00:87:b3:a0:0c:c7:fb:c8:6f:a1:fe:56:bf:8e:
f5:4d:f1:18:04:a4:5c:24:14:10:96:37:7c:d8:d9:f9:31:f0:
46:22:23:df:50:7a:47:e8:12:91:92:64:25:ba:00:2e:dc:5f:
6e:5f:8b:ea:5e:1a:32:c5:ea:18:44:40:10:f0:22:09:cd:fe:
cf:17:12:03:24:70:d9:ef:ea:b3:09:e8:d0:3a:5d:77:04:d1:
25:90:ea:ff:6f:01:e1:12:3d:4e:63:a0:12:f0:3c:7d:a5:61:
85:74:79:16:92:3d:80:9b:10:47:bc:a8:ce:72:ab:90:16:71:
1e:57:39:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYb+DFk+Ci/vh9c5ceUOIdPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIwMDgwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzRiZDM2MzYxMDYxNjc0N2NiZWIzOTAyZjg3YmZmM2Y0ZjlhZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxpqfZHzRfAAEKCfo/lhetasiJyo
mNqKDNm9wuIRv+mvLneuoU8V3hiGm88MYL/BxDlYYXLQT82esOATteK8vxtZ3+rQ
ySt1o/SGq2digy7Ka/XV5FL0Y4OzvCjlacshuYih+QGTRokoLJqHVW2cWL/YPEre
UM52UMiuA41xF8lqky0klyjMhKSPKTCWX9P6jzMVEe24l1DqQ2DBFnTIAhvc76uO
BvrRnPgjNN3gjik2oPfk0pVz4jd7mm+NMcWNu0gg5Df1ClrPQ2id280NHJpHEca5
z+1yT3DoThmtwrygrQRZRXFA+aVfvLB29Smjdr6hq2eJFENSrGrkhRoz+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOxL02NhBhZ0fL6zkC+Hv/P0+a9CMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN0V2VFkyRUdGblI4dnJPUUw0ZV84X1Q1cjBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACsWfQkTUfq/cc0IUerJ
72S0RlH0ZjvooBBEyOx9dBMK3eRGB5kLShshq9Nt7X3jLQ0ekbbz5oPD+Io1jT63
lpxf4ZnwKAR1HvbpBBueRc1D0ep38Fx6yQm6vb5Tg3wTd25HAIpFQzSWytsSjYdb
+9LRLPUce9jHUL9L1Zp8zzyqWYkAh7OgDMf7yG+h/la/jvVN8RgEpFwkFBCWN3zY
2fkx8EYiI99QekfoEpGSZCW6AC7cX25fi+peGjLF6hhEQBDwIgnN/s8XEgMkcNnv
6rMJ6NA6XXcE0SWQ6v9vAeESPU5joBLwPH2lYYV0eRaSPYCbEEe8qM5yq5AWcR5X
OYo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:13 2025 by rpki-client